diff --git a/src/layouts/MainLayout.astro b/src/layouts/MainLayout.astro
index 98e3bb9..11b08fd 100644
--- a/src/layouts/MainLayout.astro
+++ b/src/layouts/MainLayout.astro
@@ -39,7 +39,7 @@ const { title } = Astro.props;
         &
         <a href="https://karleksguiden.se/" target="_blank" rel="noopener noreferrer" data-glow-link="magenta" class="text-gray-400 hover:text-white transition-colors">karleksguiden.se</a>
       </p>
-      <p>&copy; {new Date().getFullYear()} Images by Olofsson. All rights reserved.</p>
+      <p>&copy; {new Date().getFullYear()} Images by Olofsson. All rights reserved. &middot; <a href="/privacy" class="text-gray-400 hover:text-white transition-colors">Privacy</a></p>
     </footer>
 
   </body>
diff --git a/src/pages/privacy.astro b/src/pages/privacy.astro
new file mode 100644
index 0000000..27a21a9
--- /dev/null
+++ b/src/pages/privacy.astro
@@ -0,0 +1,71 @@
+---
+// src/pages/privacy.astro
+import MainLayout from '../layouts/MainLayout.astro';
+import WaveBackground from '../components/WaveBackground.astro';
+---
+
+<MainLayout title="Privacy Policy | Images by Olofsson">
+
+  <WaveBackground opacity="opacity-80" />
+
+  <div class="container mx-auto px-4 py-12 md:py-20 relative z-10">
+    <div data-trail-box class="bg-neutral-900/60 backdrop-blur-md border border-white/10 rounded-3xl p-8 md:p-12 shadow-2xl mb-20 max-w-3xl mx-auto">
+
+      <h1 class="text-4xl md:text-5xl font-bold leading-tight mb-2">Privacy Policy</h1>
+      <p class="text-gray-500 mb-10">Last updated: 27 September 2026</p>
+
+      <div class="space-y-8 text-gray-300 text-lg leading-relaxed">
+
+        <section class="space-y-3">
+          <h2 class="text-2xl font-bold text-white">Who is responsible</h2>
+          <p>
+            Images by Olofsson is run by Linus Olofsson, Sweden. Questions about privacy:
+            <a href="mailto:Admin@imagesbyolofsson.se" class="text-white underline hover:text-gray-300">Admin@imagesbyolofsson.se</a>.
+          </p>
+        </section>
+
+        <section class="space-y-3">
+          <h2 class="text-2xl font-bold text-white">This website</h2>
+          <ul class="list-disc pl-6 space-y-2">
+            <li>There are no user accounts, no contact forms, no advertising and no analytics or tracking cookies.</li>
+            <li>If you email me, your address and message are used only to answer you and are not shared with anyone.</li>
+            <li>Password-protected galleries keep the password only in your open browser tab; it is not stored after you close it.</li>
+            <li>
+              The site is delivered through Cloudflare, which processes technical data such as your IP address to deliver
+              and protect the site. See <a href="https://www.cloudflare.com/privacypolicy/" target="_blank" rel="noopener noreferrer" class="text-white underline hover:text-gray-300">Cloudflare's privacy policy</a>.
+            </li>
+            <li>If you appear in one of my photos and want it removed, email me and I will take it down.</li>
+          </ul>
+        </section>
+
+        <section class="space-y-3">
+          <h2 class="text-2xl font-bold text-white">Photo backup app (Google)</h2>
+          <p>
+            "townhouse-backup" is a private tool used only by me to back up my own photos to my own Google account.
+          </p>
+          <ul class="list-disc pl-6 space-y-2">
+            <li>Google Drive: it only accesses files it has created itself (a backup copy of my photo archive).</li>
+            <li>Google Photos: it only uploads my photos and adds them to albums it created; it cannot see anything else in the library.</li>
+            <li>No data from anyone else is collected. Nothing is sold, shared with third parties, used for advertising or used to train AI models.</li>
+            <li>
+              Its use of information received from Google APIs adheres to the
+              <a href="https://developers.google.com/terms/api-services-user-data-policy" target="_blank" rel="noopener noreferrer" class="text-white underline hover:text-gray-300">Google API Services User Data Policy</a>,
+              including the Limited Use requirements.
+            </li>
+          </ul>
+        </section>
+
+        <section class="space-y-3">
+          <h2 class="text-2xl font-bold text-white">Your rights</h2>
+          <p>
+            Under the GDPR you can ask what personal data I hold about you, and have it corrected or deleted — just email me.
+            You can also complain to the Swedish Authority for Privacy Protection
+            (<a href="https://www.imy.se/" target="_blank" rel="noopener noreferrer" class="text-white underline hover:text-gray-300">IMY</a>).
+          </p>
+        </section>
+
+      </div>
+    </div>
+  </div>
+
+</MainLayout>